CS0-003: CompTIA Cybersecurity Analyst (CySA+)

By CompTIA · Question Mode

QuestionQ41

Security Operations

A company security analyst reviews a file-integrity-monitoring alert reporting a hash mismatch in the login.html file. After comparing the code with the prior version of the page source, the analyst finds this added code snippet:

Question Image

Which of the following best characterizes the activity the analyst observed?

Explanation

Posting an email address and password to an external domain transfers captured credentials to an unauthorized destination. This is credential exfiltration.

Community Discussion

No comments yet. Be the first to start the discussion!